DB_DHL_AWB_001833022AD[.]exe | Triage

Sharing

General

Target

DB_DHL_AWB_001833022AD.exe
Size

724KB
MD5

9dc4c0b44a4365eb0ff2cb9cde1b9672
SHA1

2974174559138c35dd0229107e78b888460306db
SHA256

73ce1d5ddffdbd047c15e2bbdace225e6defc74eff88958911641f5fde726081
SHA512

4fd297e8c66bcbdd56238ecdf0ac10e8cefff70517caa01376c8abf52be0fddd673a15c9e5b47c6611d22dbd6989cff846f3c85cee6cf8ba76e52b32571e935c
SSDEEP

12288:lhRP2B0xTGlxNqvNu2hZ+nUEsn9cIg4Jk4GWfhNczzLsBKCXa8gyxSkJwQ+0j5Lg:l3PLaVUH999VhJk+hNcLsgYaQ+0tLg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DB_DHL_AWB_001833022AD.exe

Files

DB_DHL_AWB_001833022AD.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 700KB - Virtual size: 696KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ